CERT24Russian APT Group BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic OrganizationsLoading data…
CERT24Threat Observatory
Period

Russian APT Group BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations

Recorded Future’s Insikt Group documented a campaign attributed to BlueDelta that ran from late September 2025 through early April 2026 and targeted government and diplomatic organizations in Romania, Spain, and Türkiye. The attacks used macro-enabled Microsoft Word documents, a Windows batch-script backdoor called HOOKEDGE, webhook.site, and Microsoft Edge.

← Back to intelligence

Russian APT Group BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations

Recorded Future’s Insikt Group documented a campaign attributed to BlueDelta that ran from late September 2025 through early April 2026 and targeted government and diplomatic organizations in Romania, Spain, and Türkiye. The attacks used macro-enabled Microsoft Word documents, a Windows batch-script backdoor called HOOKEDGE, webhook.site, and Microsoft Edge.